dsh 0.2.0-rc.2: in-container update (experimental channel), path-agnostic compose, upstream patches adapted to 0.1.x/0.2.x

upstream/container/platform/tools/verify-management-dependencies.mjs

@@ -0,0 +1,55 @@
+#!/usr/bin/env node
+
+import { lstat, readFile, readdir } from 'node:fs/promises'
+import { join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const EXPECTED = Object.freeze({
+  '@xterm/addon-fit': '0.11.0',
+  '@xterm/xterm': '6.0.0',
+  'qrcode-generator': '2.0.4',
+  undici: '8.10.0',
+  ws: '8.21.3',
+})
+
+async function requireFile(root, path) {
+  const value = await lstat(join(root, path))
+  if (!value.isFile()) throw new Error(`Management dependency asset ${path} is not a file`)
+}
+
+export async function verifyManagementDependencies(rootArg) {
+  const root = resolve(rootArg)
+  for (const [name, expectedVersion] of Object.entries(EXPECTED)) {
+    const packageRoot = join(root, 'node_modules', ...name.split('/'))
+    const metadata = JSON.parse(await readFile(join(packageRoot, 'package.json'), 'utf8'))
+    if (metadata.name !== name || metadata.version !== expectedVersion) {
+      throw new Error(`Management dependency ${name} must be exactly ${expectedVersion}`)
+    }
+    if (name === 'qrcode-generator') {
+      if (metadata.license !== 'MIT') throw new Error('Management dependency qrcode-generator must remain MIT licensed')
+      await requireFile(packageRoot, 'README.md')
+    } else await requireFile(packageRoot, 'LICENSE')
+  }
+  for (const path of [
+    'node_modules/ws/index.js',
+    'node_modules/undici/index.js',
+    'node_modules/@xterm/xterm/lib/xterm.mjs',
+    'node_modules/@xterm/xterm/css/xterm.css',
+    'node_modules/@xterm/addon-fit/lib/addon-fit.mjs',
+    'terminal/pty-helper.py',
+    'terminal/sessions.mjs',
+  ]) await requireFile(root, path)
+  const entries = await readdir(join(root, 'node_modules'), { recursive: true, withFileTypes: true })
+  const native = entries.find(entry => entry.isFile() && entry.name.endsWith('.node'))
+  if (native !== undefined) throw new Error('Management dependencies must not contain native .node modules')
+  return Object.freeze({ packages: EXPECTED, nativeModules: 0 })
+}
+
+if (process.argv[1] === fileURLToPath(import.meta.url)) {
+  const root = process.argv[2]
+  if (root === undefined) {
+    console.error('usage: verify-management-dependencies.mjs <management-root>')
+    process.exit(64)
+  }
+  process.stdout.write(`${JSON.stringify(await verifyManagementDependencies(root))}\n`)
+}